kau.se

.se crawl

First seen 2026-05-12 · Last seen 2026-05-20 · ok HTTP/1.1 200 32880 ms crawled 2026-05-18

SE · 193.10.226.38 · AS1653 Vetenskapsradet / SUNET

Reputation 94/100 dmarc monitor-only

sector education type homepage

HTML metadata

Title: Välkommen till Karlstads universitet
Description: Vi forskar och utbildar kring samhällsviktiga frågor, i nära samarbete med samhället.
Language: sv
Canonical: https://www.kau.se/

Open Graph

email: info@kau.se
title: Karlstads universitet
region: Värmland
locality: Karlstad
site name: Karlstads universitet
description: Vi forskar och utbildar kring samhällsviktiga frågor, i nära samarbete med samhället.
postal code: 651 88
country name: Sverige
phone number: +46 54-700 10 00
street address: Universitetsgatan 2

Social

Contact

Email

info@kau.se

Phone

054-700 10 00

Address

Universitetsgatan 2, 651 88, Karlstad, Värmland, Sverige

DNS records live

NS

gungner.kau.se
ns2.chalmers.se
ymer.kau.se

MX

10 kau-se.mail.protection.outlook.com

Verified for

Google
HARICA
Meta
Microsoft 365

Email authentication partial

SPF

v=spf1 include:spf.protection.outlook.com ip4:193.10.226.36 ip4:130.243.21.250 ip4:130.243.21.251 ip4:130.243.21.252 ip4:193.10.162.2 ip4:82.196.180.210 include:spf.mandrillapp.com a:mail1.hr.evry.se a:smtp1.ondemand.formpipe.com ~all

softfail (~all)

DMARC

v=DMARC1;p=none;pct=10;rua=mailto:dmarc.rua@kau.se;ruf=mailto:dmarc.ruf@kau.se;fo=1;sp=none

policy: none (monitoring only) · pct=10 · sp=none

DKIM

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDVaBY2V+5eu5uPizlcXh16XGsht6bj3Mt5xoWyYmldw89llFSRQmDLg2KHwsrTBqstDNKfrwi0MJIFrARdEI…
selector2: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDFm1IIYns36OhYklPHkU0FE8oGFlVzZyqibplTah1ns6RYOwYuDzpXacLXloX7wOCNi9OzKnRrU6LDB02Q5N…

selectors probed

Certificates

Loading certificate

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.kau.se/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy
cross-origin-opener-policy
cross-origin-resource-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: camera=(), microphone=(), geolocation=()
x-content-type-options: nosniff
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.kau.se https://www.googletagmanager.com https://cdn.siteimprove.net https://*.siteimprove.com https://livestream.com https://tlk.io https://*.cloudfront.net https://www.ctnotes.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: https://*.cdninstagram.com https://*.kau.se; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://*.kau.se https://graph.instagram.com https://www.google-analytics.com https://*.kaltura.nordu.net https://my2.siteimprove.com https://identity.siteimprove.com https://livestream.com https://tlk.io https://www.ctnotes.com; frame-src 'self' https://open.spotify.com https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com https://livestream.com https://w.soundcloud.com https://sveri
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-site